
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json)
Hash identifier: uVf/gWn7gvSrgH/eu6goMPP6Ej4UY+JMcsgUa9y0q0A=
Subject key identifier: 20:1E:B1:0F:0A:FB:E3:E9:3F:A5:16:AB:C1:B5:C4:E4:19:99:8E:CE
Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F
Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F
Certificate serial: 5614208937B4F43468DF07925B5B5595494534C5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
Manifest number: 0219
Signing time: Sun 01 Mar 2026 12:52:13 +0000
Manifest this update: Sun 01 Mar 2026 12:47:13 +0000
Manifest next update: Wed 04 Mar 2026 23:19:13 +0000
Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=)
2: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: upVmayvsNgOquMa2NVUBS6Ot4RUa6Gg1A6RUgRxpI+c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl
rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 23:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:14:20:89:37:b4:f4:34:68:df:07:92:5b:5b:55:95:49:45:34:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F
Validity
Not Before: Mar 1 12:47:13 2026 GMT
Not After : Mar 4 23:19:13 2026 GMT
Subject: CN=201EB10F0AFBE3E93FA516ABC1B5C4E419998ECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:c0:05:5d:87:f3:de:79:69:0f:91:27:40:
c0:57:49:de:17:63:a6:3a:c6:fc:6e:4c:23:d9:7e:
01:7a:2c:7a:44:83:68:8d:91:0d:a4:a0:f2:1e:08:
ad:7b:b4:81:e7:27:64:ec:57:6e:19:69:1b:6a:ce:
ac:52:7a:d8:af:5d:34:81:cf:03:ae:fe:07:78:a7:
72:44:2f:95:b6:49:f6:3a:ed:80:8d:75:11:bc:a5:
c6:eb:a9:a5:ca:07:ed:67:74:fa:76:75:cd:9e:30:
c0:72:e8:20:46:3d:47:34:e8:3a:e6:03:e6:e3:c3:
07:73:7c:f0:46:f4:de:09:6d:c9:86:c2:f3:ed:5f:
ba:62:a1:73:1d:aa:40:bf:a1:6e:59:0b:9e:5a:84:
e1:e8:d5:4e:e6:68:ac:87:2c:2c:c5:79:e7:7e:b3:
3b:95:0f:ca:66:86:4b:90:e9:64:b7:b2:22:39:d0:
f0:7c:11:ab:81:1f:99:80:2c:cf:fd:f7:02:a2:d7:
ad:9b:04:2e:56:b5:32:24:e1:17:98:8a:81:f1:91:
4f:2b:54:ec:8f:f5:fa:d7:c7:33:30:93:d0:34:e3:
f1:62:6c:41:af:c4:b7:98:f7:27:1c:4b:6f:18:f4:
fc:26:3c:2e:b9:67:89:e0:e3:f6:d1:fb:bf:d0:8a:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1E:B1:0F:0A:FB:E3:E9:3F:A5:16:AB:C1:B5:C4:E4:19:99:8E:CE
X509v3 Authority Key Identifier:
keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d9:64:35:a5:18:23:49:bc:49:78:f5:6c:e5:f3:ab:94:3a:
c0:bd:7d:a4:6e:21:f7:c0:a5:14:be:f2:0c:f4:a7:dd:b5:a9:
c8:97:05:69:c0:ef:59:09:96:2c:9d:57:de:85:d9:c2:fb:28:
62:51:55:b9:0b:3c:73:a6:2a:76:43:f8:c0:80:2d:2a:84:95:
21:c1:8d:16:a9:52:34:a3:10:1b:be:77:47:0f:53:10:65:5c:
38:f9:49:0f:fd:79:83:56:6a:e0:bb:99:86:48:43:80:b2:67:
a0:c5:b9:9a:fc:2d:05:b8:39:cd:7c:2c:79:3e:34:c5:c2:16:
64:6b:62:57:9f:86:29:6f:d1:35:82:24:6c:b0:90:32:02:98:
f2:70:af:f3:1d:74:58:57:8d:d5:8d:0d:b8:ce:59:e1:e1:15:
dd:07:e0:ea:75:b9:1b:11:83:d5:a4:50:4b:6d:83:3f:fc:1d:
98:d3:a2:b6:50:cf:32:e3:06:5a:10:d6:eb:76:75:59:7a:47:
79:32:35:81:13:8b:fd:5e:c2:20:fa:ea:00:97:9b:68:3c:99:
f4:be:53:03:05:c5:be:79:29:d2:e7:ba:88:47:3c:ff:40:86:
96:5d:f8:1b:b9:99:6e:03:9d:f9:c3:96:78:29:be:07:22:16:
8e:6e:9a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:42 2026 by rpki-client